Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
File:                     oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json)
Hash identifier:          Coqbxnwgp+yAwzSrV/U5UodiRHkmLWjvjln0kPHqMhs=
Subject key identifier:   5B:54:11:DE:B1:5A:28:59:69:16:7D:1F:AD:79:F4:4B:12:6E:5F:07
Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
Certificate issuer:       /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
Manifest number:          023A
Signing time:             Wed 23 Sep 2026 02:25:46 +0000
Manifest this update:     Wed 23 Sep 2026 02:25:46 +0000
Manifest next update:     Wed 30 Sep 2026 02:25:46 +0000
Files and hashes:         1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: 8/LnQivzQhNGAlInAFSJaStGPr/gjeNejsTP4Ivjinc=)
                          2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: r8/9peTSjQhr0FyyL8WXDBdFlkEwEDLfGXbQKn3ob18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
                          rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
        Validity
            Not Before: Sep 23 02:25:46 2026 GMT
            Not After : Sep 30 02:25:46 2026 GMT
        Subject: CN=6ab338aa-8086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3f:1c:87:de:de:95:cd:3c:1a:14:7d:1d:e2:
                    aa:fb:b1:09:6c:f0:bd:f6:33:be:69:e0:cc:7d:5e:
                    03:03:d0:27:ae:8d:c4:02:1b:da:ad:c2:94:c1:c1:
                    a1:99:09:d2:6b:72:1a:da:b1:51:54:f4:d5:fe:59:
                    c9:82:01:48:90:d1:12:35:6d:6a:19:5c:65:56:d4:
                    d8:3c:26:41:24:3a:d2:93:c0:12:61:40:2c:74:22:
                    0b:f6:3e:b0:da:01:bb:77:c1:57:14:1c:6c:cd:35:
                    bc:c6:a2:71:ff:1a:cf:65:76:a1:87:1d:97:8a:fb:
                    df:09:1d:f5:64:20:90:6a:73:fe:3f:00:20:64:6d:
                    74:4b:71:df:6a:d4:4f:07:23:95:7f:1d:90:94:fd:
                    78:3e:00:c4:a6:1c:21:24:9d:68:0d:99:13:f8:06:
                    f4:1a:46:13:72:00:ef:32:9f:6b:5f:76:27:44:4f:
                    da:07:05:f3:f7:d4:2a:7d:46:09:34:65:3d:4e:6b:
                    8f:67:44:e9:b9:6e:02:8f:b1:96:27:9c:8e:15:32:
                    68:ac:50:23:33:7e:80:98:a3:96:f5:38:9d:c4:37:
                    5d:e2:9f:f5:82:b9:06:75:b1:39:b2:88:65:f5:88:
                    e3:35:34:b1:8c:2b:08:87:b2:18:57:5a:22:49:1c:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:11:DE:B1:5A:28:59:69:16:7D:1F:AD:79:F4:4B:12:6E:5F:07
            X509v3 Authority Key Identifier:
                keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:72:27:52:de:46:6f:a5:00:33:1d:c3:07:29:2a:cc:90:
         bb:22:02:db:19:e9:ac:5e:29:fe:73:e4:14:12:aa:4e:d8:ce:
         58:0c:80:ca:e6:40:b2:57:29:fd:d9:c2:38:72:28:63:22:4d:
         d6:09:79:8e:1b:29:c7:7a:da:ac:c0:ca:5c:81:5b:a0:4f:d8:
         88:7b:ee:b3:20:29:2d:60:0c:77:a2:a7:30:60:97:94:88:76:
         3a:5d:da:34:24:1b:d1:eb:7e:17:9d:54:f6:4b:87:d1:69:ad:
         56:ca:04:26:12:bf:0b:b2:d3:7d:86:d3:b5:9d:55:46:49:7a:
         c8:64:32:55:d7:03:ce:69:86:2c:0e:14:d8:9c:45:e8:4d:7f:
         1f:39:d9:32:e4:ca:d0:2d:cc:8e:b2:11:62:1a:8b:c5:44:24:
         51:6d:1c:a8:3c:89:4d:f3:b3:56:a4:26:93:8b:79:c0:41:53:
         0e:6d:d9:88:5e:55:64:bd:d6:0e:c2:ca:dc:06:3a:57:1f:8e:
         eb:eb:36:b9:4f:c5:bd:85:30:a4:ce:c7:13:ca:c2:da:65:a0:
         d0:75:9b:6f:77:f3:92:ce:5a:d9:d9:06:68:62:01:13:d8:84:
         00:9c:2b:14:f9:98:77:e8:47:cd:09:3c:42:89:74:e0:9e:14:
         97:b6:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:23:52 2026 by rpki-client